MAL-2024-3253 Malicious code in ufo-rocks2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3374b9d8ce913176fed7916c9adf5e5239b09aed801473ef2363bdf190f1c8f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ufo-rocks2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3374b9d8ce913176fed7916c9adf5e5239b09aed801473ef2363bdf190f1c8f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ufo-helpers (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-3252 Malicious code in ufo-helpers (npm)

--- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2024-36933

In the Linux kernel, the following vulnerability has been resolved: nsh: Restore skb-protocol,data,macheader for outer header in nshgsosegment. syzbot triggered various splats see 0 and links by a crafted GSO packet of VIRTIONETHDRGSOUDP layering the following protocols: ETHP8021AD + ETHPNSH +...

RHEL 5 : kernel (RHSA-2019:1931)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1931 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Exploitable memory corruption due to UF...

The 4 Big Questions the Pentagon’s New UFO Report Fails to Answer

The Pentagon says it’s not hiding aliens, but it stops notably short of saying what it is hiding. Here are the key questions that remain unanswered—some answers could be weirder than UFOs...

Malicious code in schibsted-ufo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a28167ab8729dd1bbb8263b5862e431e6df15135343db190e75aab652e104eea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8525 Malicious code in schibsted-ufo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a28167ab8729dd1bbb8263b5862e431e6df15135343db190e75aab652e104eea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview ufo-rocks2 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview ufo-helpers is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

K60250153: Linux kernel vulnerability CVE-2017-1000112

Security Advisory Description Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSGMORE ipappenddata calls ipufoappenddata to append. However in between two send calls, the append path can be switched from UFO to non-UFO one, which lead...

The More You Look for Spy Balloons, the More UFOs You’ll Find

No, there’s not a sudden influx of unidentified objects in the skies above the US—but the government is paying closer attention...

Mageia: Security Advisory (MGASA-2017-0278)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The Pentagon Has Set Up a UFO Office

Plus: An Apple lawsuit, a GoDaddy breach, and more of the week's top security news...

What the Pentagon’s New UFO Report Reveals About Humankind

The document says less about the search for life in the universe, and more about our current cultural climate and distrust of expertise...

The strangest cybersecurity events of 2020: a look back

This year is finally coming to an end, and it only took us about eight consecutive months of March to get here. There is a ton to talk about, and that’s without even discussing the literal global pandemic. You see, 2020s news stories were the pressure-cooker product of mania, chaos, and the...

UFO VPN leaks database again; gets taken over & destroyed by hackers

By Sudais Asif UFO VPN was caught saving and leaking user logs despite complaining strictly no-log policy. Here's what happened now. This is a post from HackRead.com Read the original post: UFO VPN leaks database again; gets taken over & destroyed by hackers...

CVE-2017-1000112

An exploitable memory corruption flaw was found in the Linux kernel. The append path can be erroneously switched from UFO to non-UFO in ipufoappenddata when building an UFO packet with MSGMORE option. If unprivileged user namespaces are available, this flaw can be exploited to gain root privilege...

Internet Bug Bounty: Linux kernel: CVE-2017-1000112: a memory corruption due to UFO to non-UFO path switch

Hi! CVE-2017-1000112 is a vulnerability I found in the Linux kernel caused by a UFO to non-UFO path switch for UFO packets. It can be exploited to gain kernel code execution from an unprivileged process. This vulnerability was reported to [email protected] and linux-distros@ following the...